last executing test programs: 9m29.216186991s ago: executing program 3 (id=6720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xffffffffffffff95}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 9m28.950003313s ago: executing program 3 (id=6725): r0 = syz_open_dev$I2C(&(0x7f0000001c40), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x4000000315) 9m28.786425891s ago: executing program 3 (id=6728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 9m28.527492853s ago: executing program 3 (id=6730): syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fb, &(0x7f0000001380)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9m28.136692331s ago: executing program 3 (id=6734): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x7) 9m27.755974369s ago: executing program 3 (id=6739): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000580)=[{0x22, '\x00', @buffer={"5c8310ef19d98ae6b20542f8a6cdd93f8f9fd237ff1bccb2835c73657287807e", 0x20}, 0xe6}, {0x25, '\x00', @st={0x4, [{0x2, @svalue=0x100}, {0x0, @uvalue=0x5}, {0x0, @uvalue=0x1}, {0x2, @svalue=0x80000001}]}, 0x4}, {0x9, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x409}]}) 9m27.469049192s ago: executing program 32 (id=6739): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000580)=[{0x22, '\x00', @buffer={"5c8310ef19d98ae6b20542f8a6cdd93f8f9fd237ff1bccb2835c73657287807e", 0x20}, 0xe6}, {0x25, '\x00', @st={0x4, [{0x2, @svalue=0x100}, {0x0, @uvalue=0x5}, {0x0, @uvalue=0x1}, {0x2, @svalue=0x80000001}]}, 0x4}, {0x9, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x409}]}) 7m45.171648991s ago: executing program 4 (id=8311): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="ef8700001e"]) 7m45.058408456s ago: executing program 4 (id=8313): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000240)={0x6, 0x20, 0x8, 0x20, 0x1ff}, 0x48) 7m44.941887162s ago: executing program 4 (id=8315): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0xc8, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 7m44.792194889s ago: executing program 4 (id=8318): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000140)={[{@adinicb}, {@unhide}, {@anchor={'anchor', 0x3d, 0xec1}}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@undelete}, {@volume={'volume', 0x3d, 0xb1}}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x2}}]}, 0xde, 0xc2e, &(0x7f0000000f40)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m44.453711954s ago: executing program 4 (id=8324): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) 7m43.884141971s ago: executing program 4 (id=8336): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x502, &(0x7f0000000f40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0x100000003, 0x8000000000000, 0x1, 0xfffffffffffffffe, 0x8, 0x3, 0xe49}) 7m43.589597135s ago: executing program 33 (id=8336): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x502, &(0x7f0000000f40)="$eJzs3c9vVFsdAPDvnba0lIEWZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUtbYcO0Hag8/kkl3vPvUO/39Nyzrn30JkTQNc6ExGrEXEkIu5GxFB+Psm3uN7c0te9fPFoau3Fo6kkGo3b/0uy6+m52PR3UsfyrzkQET/7ccQvk+1x68src5OVSnkhL48sVudH6ssrF2cL+ZnxibGJ0auXroy3WZPeXV9xuvqn5z+avfnzv/z5G8/+vvr9X6dpFX9zPLu2uR57qVn1vihuyfTmfgTrkN7838876NvrXHg7aWv7UkSczdr/UPS00Y4AgI9bozEUjaHNZQDgsEuf/4uRFEr5XEAxCoVSqTmHdyoGC5VaffHCUG3p/nRkc1jD0Ve4N1spj+ZzhcPRl6Tlsex4ozy+pXwpIk5GxG/7j2bl0lStMt3JGx8A6GLHtoz/n/Y3x38A4JAb6HQCAMCBM/4DQPcx/gNA93mL8d+7AwHgkPD8DwDdx/gPAN1n1/H/8cHkAQAciJ/eupVujbX886+nHywv/aD44OJ0uT5Xqi5NlaZqC/OlmVptplIuTTUau329Sq02P3Z5vVhfXrlTrS3dX7wzW52cKd8p+8BnAOi8k6ef/jOJiNVrR7MtNq3lYKyGw63Q6QSAjunpdAJAx3g/D3SvNp7xTQPAIbfDEr2vafkrQk/effFXoLPOf9X8P3Qr8//Qvd5t/v+He54HcPDM/0P3ajQSa/4DQJcxxw+81///AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJcqZltSKGVrga+mfxZKpYjjETEcfcm92Up5NCJORMQ/+vv60/JYp5MGAN5T4T9Jvv7X+aFzxa1XjySf9Wf7iPjV72//7uHk4uLCWHr+/+vnF5+8WkXwyEEnDwBsdX37qWz8Hs/3mx7kX754NPVqO8gUn99oLi6axl3Lt+aV3ujN9gOR3l0MfpLk5ab0fqVnD+KvPo6Ir2zU/+GmCMWBiOF85dOt8dPYx/ch/sb3P8nmZjbiF16LX8iupfu+7Hvx5T3IBbrN0xvNfjJve2kTy9tfIc5k+53b/0DWQ72/V/3f2rb+r7De//Vsi59kbf7MevnNmTy//NefbDvZGGpeexzxtd6d4ifr8ZMW/e+5Nuv4r69/82yra40/RJyPneM3VbNudmSxOj9SX165OFudnCnPlO+Pj0+MTYxevXRlfKQ/KuXRkWym+m87xfjvtQsnWsVP6z/YIv7ALvX/Tpv1/+Pnd3/xrTfE/963d/75n3pD/HRM/G6b8ScHr7dYvrv53D7dov67/fwvtBn/2b9Xptt8KQBwAOrLK3OTlUp5YZeD9F5zt9c4+DgPYjXiA0ijSw/Se/APII1tB53umYD9ttHoO50JAAAAAAAAAAAAAADQSn15Za4/9vftRJ2uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfXFwEAAP//3DDHyw==") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000180)={0x1, 0x7, 0x100000003, 0x8000000000000, 0x1, 0xfffffffffffffffe, 0x8, 0x3, 0xe49}) 2.513857792s ago: executing program 5 (id=16172): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f00000000c0)='%(,c\xbe\xfb/:', 0x0) 2.337160821s ago: executing program 1 (id=16173): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.302551252s ago: executing program 5 (id=16174): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.209180387s ago: executing program 1 (id=16176): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0x15a, &(0x7f00000001c0)="$eJzs0D9rWlEYx/HvufdctVSxpRak0Cp0sZWCf2i3UrylUodWaOnSSbC3raBYKrRuVUq2DEJWh5CsIZBXoNEhJCRL8iayuAUyJpx7TUIIvoI8n0X8Pef5PXDfvT7IKK68bbd+/fY6He9b+lP1Q/nz8WhUMnkIulvX5sH7cQl+ohlrmPXBxNOYw/dG07Pq7ab5PytBGHDvYnIHiF/ccxOavoY8wX7mKUwe+u8sbmZeEcffe6TBjQdZDjhr3An67geZ6TsBbFAqND/22Gapkk09UNAdZjc39j7u71ZePH/jLRfKg2fRpJ39B2u4KrIz/XFkz7dMhfktFgqvirm8xctDv7A3QL+P/oGvCrTps/D7QiSf6C/wX8GKf2u2rWLAZPW02gpffuveXzsNKjWs15LOei1xz8LOaBYJJpGFcyGEEEIIIYQQQgghhBBCCCGEELfYeQAAAP//TSFM+Q==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) 1.752593918s ago: executing program 1 (id=16180): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) 1.585016136s ago: executing program 1 (id=16184): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) tee(r1, r0, 0x8, 0x0) 1.429061853s ago: executing program 0 (id=16186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) 1.368130675s ago: executing program 1 (id=16188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12, 0x110}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 1.264776401s ago: executing program 0 (id=16189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001a00010028bd7000fedbdf2481808000000000000000000014000180"], 0x44}}, 0x884) 1.170844045s ago: executing program 1 (id=16191): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x444a, &(0x7f000000bac0)="$eJzs3cFvG1UaAPA3k+w27bbdpNtDV1ppLW2lXS0oSnoCUok0TZsmbSgqtEJcUidx24ATV4mDOPQQbpU4IXFAHCqQ4IByqnLgSPkTuHCjnCvBgQtSJUSQ7UniGdutG+KElt9Pqsfz3rw3n/15nt9Ucl6cKN+YW8rNLeXyC7nSzLWlE7l3SsXl+UKId8len5/2dCJPcr93Lp4++9qVEyF8Pfvtg/X19fVQ0R2aGqx7/vNPt2bqtxviTJtKv8172ylvhhCONsRV0RVCeOPLEKIQwqmkbCTZ7g8hHA61uiu33r+aq+vxu4fbj+bu/cLJECZvrw0dn1i9s9b6tUchfFz85/PX53/4T9fQ9//f/hkBAAAAAAAAAAAAAAAAAHiWjF26ePnVgcFwLwrdq1Hj73XHkm2uRfv1HfPvzr9YAAAAAAAAAAAAAAAAAAAA+IPa+v1/LjrS5Pf/o8l2uEX79Zfrdr7oXJx0xvgrF0fPDAwm679HDfUvJEU/nuoKfU3Wfc+u/34q0775+u+N59muanxdW/u9IYr7kzg+/6qyH8f9/SF8miz8fiw6EBdLS+XnrpWWF2Z3LIynVjr/tdX7U9lJFvRvN/8jmf47v/7/Pxo+TZX9qzv3EXumpfPf1fK4z96L2sr/6Uy73cg/25fOf3e1bH/9AcO1AaCS/w+6H5//0Uz/ncr/4RBCLqrEmkuNAJU5TKW81XyFtHT+/1ItSw2dyRvZ6vp/mMn/mUz/ezX+r2S/iGgqnf+/Vst6UkdsXf998eOv/7OZ/vci/5X4V9KF3Z2N4emVzv++WmH63aq+k+2O/2OZ/juV/8txNc7qhKX+E7Aa1eJv9ffqSEvnv6ehfuv+L25r/ncu035X7v/qzrtx/7cx/P8vqt3/0dyTzP/buf7HM+06Pf4PV+d/bFc6/weqZem5c2/1sd38T2T6f1T+D/2OuKuzkp6N/G+NJ7/uq5V/Yv7XlnT+/1YrjOuPWKk89FTnf9Hj5//nM/0/Iv879CXQOP+rxL8S70zvz7p0/g+2PK6S/2/a+P6/kGnX+fl/CAP+r2/b0vlvPSJXr/+eR+b/dmX2OJlp1+n8/ze0nrMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BmMJNveEMX9qf047u8P4XSyfywciKbzs1PTxdLM20shjCbluXAkul4sTeeLU3MLpdnCVL5YLM2EcCapPxp6oqViqTw1n795drOv/dGNQn6xPF3Il0MIY0n5v8Khjb6m58rz+ZshhHObdX+PS4s3b+QXpmbnFl8aGBgYCOObMfRFhXfLhYVy7ey12hAmNtv2RnXBVavPb8ZyMHqrtLy4kC9Wyy/UtSmWZvLFujaTSd2HoS8qLy4vzOTLhali6frG+fbScLIdHb/0+qULgw31V6PadmR3wwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgCd0bevGjEEJ3bS8OIeSi5EmU/Eu5e79wcuqXydtrQ8cnVu+sPWh2DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhV36R2kgiOIA/GYstPQYVstuZ7uiiBauCJ5Aj+Fh9ChewjtYpEibIgSSWQj7B7ZJqu9rHsyPmfdgHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/d+2vdRKS42l5G/H7+/R/nz6V+303fvzjDjJzO00t3/1A35d/TKL8tR6s279PN+usjJmrvZ7Anw306GPcZmtu3ufn6vteRchURbclvUs5VtewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB07cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZR9G0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//+5oiNw==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1.149695026s ago: executing program 5 (id=16192): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0xff, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000004c0)={0x0, 0x0, 0x1}) 1.143578896s ago: executing program 0 (id=16193): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2a69c258ca", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)="7349b402eda2423809e96fe72d9d3b1dd9059eb40235d400eb5036b7171b1cf8a0ba3e6d9c2381aeee29b27d90df516206d6e7eae391fd85ee90d90765612811d8", 0x41}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3cc}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x40002aa, 0x40) 960.982085ms ago: executing program 5 (id=16195): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000100)={0x0, 0x8}) 926.923346ms ago: executing program 0 (id=16196): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x160) getdents64(r0, 0xfffffffffffffffe, 0xff70) 798.794362ms ago: executing program 5 (id=16198): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) 786.633073ms ago: executing program 0 (id=16199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 675.360338ms ago: executing program 0 (id=16200): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 675.254418ms ago: executing program 2 (id=16201): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x54) 508.158836ms ago: executing program 2 (id=16202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x84, 0x30, 0xb, 0x5, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e27}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 317.144715ms ago: executing program 2 (id=16203): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1000, 0x0) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) 121.815504ms ago: executing program 2 (id=16204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 121.267784ms ago: executing program 5 (id=16205): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1a}, 0xa) 90.393486ms ago: executing program 2 (id=16206): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, 0x0, 0x0) 0s ago: executing program 2 (id=16207): r0 = syz_open_dev$loop(&(0x7f0000002a80), 0xfffffffffffffe00, 0x80040) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000002ac0)={r0, 0x8, {0x0, 0x0, 0x0, 0x7, 0x9, 0x0, 0x3, 0x13, 0x9, "8c62ee54c545401b78475f71c30070ab371930b338cb94b0f2b4d5d7788c8014e30c013432df595f76d221789db05dec30db5c9fb3d86ec7a707432640f0e3cb", "5faa88ad7d84104b2d7d344741268a90e7911ae036fee94af88eb8da9ab4f66fe1ae3aea4f93ce6633ba1a780016c6c74d5d439222dbfe601aec310feac7c5d1", "06814a734739563f0023fa3859d000", [0x899, 0x6]}}) kernel console output (not intermixed with test programs): urce [ 1213.820870][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1213.853127][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.881722][ T8] usb 3-1: config 0 descriptor?? [ 1213.909599][ T8] cp210x 3-1:0.0: cp210x converter detected [ 1213.955021][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1213.962039][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1214.354931][ T8] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1214.374461][ T8] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1214.398212][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1214.430148][ T8] usb 3-1: USB disconnect, device number 98 [ 1214.445384][ T4953] netlink: 'syz.1.14197': attribute type 22 has an invalid length. [ 1214.454142][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1214.473409][ T8] cp210x 3-1:0.0: device disconnected [ 1214.756236][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14202'. [ 1214.872900][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14204'. [ 1214.948902][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14205'. [ 1215.010962][ T4974] loop5: detected capacity change from 0 to 2048 [ 1215.078029][ T4974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1215.358938][ T4991] netlink: 'syz.0.14214': attribute type 7 has an invalid length. [ 1215.451855][ T4993] netlink: 'syz.2.14213': attribute type 1 has an invalid length. [ 1215.496067][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14213'. [ 1215.635469][ T5001] netlink: 'syz.5.14218': attribute type 1 has an invalid length. [ 1215.644623][ T5003] nvme_fabrics: no handler found for transport fc-ôraddrR+ê0x333:pn-0x0444444444444444+host_traddr?nn-0x1111111111111111ð7—Ïxé¶:pn-0x22r222. [ 1216.178256][ T5028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14233'. [ 1216.484764][ T5046] netlink: 'syz.1.14242': attribute type 1 has an invalid length. [ 1216.603049][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1216.603063][ T27] audit: type=1326 audit(2000000466.570:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1216.629395][ T5044] loop5: detected capacity change from 0 to 4096 [ 1216.683699][ T5044] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1216.694111][ T27] audit: type=1326 audit(2000000466.570:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1216.731172][ T27] audit: type=1326 audit(2000000466.570:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1216.752712][ T5044] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1216.793710][ T5044] ntfs3: loop5: Inode r=b is not in use! [ 1216.806952][ T27] audit: type=1326 audit(2000000466.570:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1216.811364][ T5044] ntfs3: loop5: Failed to load $Extend (-116). [ 1216.831100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1216.847455][ T5044] ntfs3: loop5: Failed to initialize $Extend. [ 1216.941682][ T27] audit: type=1326 audit(2000000466.617:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1217.008088][ T27] audit: type=1326 audit(2000000466.626:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1217.077314][ T5062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14250'. [ 1217.088766][ T27] audit: type=1326 audit(2000000466.626:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1217.174294][ T27] audit: type=1326 audit(2000000466.626:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfa675e98e code=0x7ffc0000 [ 1217.219340][ T27] audit: type=1326 audit(2000000466.626:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfa675e98e code=0x7ffc0000 [ 1217.284460][ T27] audit: type=1326 audit(2000000466.636:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.14244" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfa675e98e code=0x7ffc0000 [ 1217.442147][ T5074] nfs: Unexpected value for 'lock' [ 1217.719273][ T5083] [U] [ 1217.722036][ T5083] [U] [ 1217.724754][ T5083] [U] [ 1217.727463][ T5083] [U] [ 1217.753314][ T5083] [U] [ 1217.756071][ T5083] [U] [ 1217.758790][ T5083] [U] [ 1217.761506][ T5083] [U] [ 1217.786904][ T5083] [U] [ 1217.789663][ T5083] [U] [ 1217.792379][ T5083] [U] [ 1217.795096][ T5083] [U] [ 1217.820799][ T5090] loop2: detected capacity change from 0 to 2048 [ 1217.821884][ T5083] [U] [ 1217.829908][ T5083] [U] [ 1217.832625][ T5083] [U] [ 1217.835328][ T5083] [U] [ 1217.894054][ T5093] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1217.942897][ T5081] [U] [ 1218.143207][ T5101] loop1: detected capacity change from 0 to 64 [ 1218.626040][ T5122] [U] [ 1218.628793][ T5122] [U] [ 1218.631505][ T5122] [U] [ 1218.634211][ T5122] [U] [ 1218.672362][ T5122] [U] [ 1218.675118][ T5122] [U] [ 1218.677831][ T5122] [U] [ 1218.680542][ T5122] [U] [ 1218.703264][ T5122] [U] [ 1218.706003][ T5122] [U] [ 1218.708695][ T5122] [U] [ 1218.711382][ T5122] [U] [ 1218.737928][ T5122] [U] [ 1218.740689][ T5122] [U] [ 1218.743405][ T5122] [U] [ 1218.746122][ T5122] [U] [ 1218.823209][ T5120] [U] [ 1219.536063][ T5841] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1219.741384][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 1219.761371][ T5841] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 1219.769447][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.802117][ T5841] usb 1-1: config 0 has no interface number 0 [ 1219.823619][ T5841] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 1219.840241][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.857327][ T5841] usb 1-1: config 0 descriptor?? [ 1219.889484][ T5841] hub 1-1:0.3: bad descriptor, ignoring hub [ 1219.905886][ T5841] hub: probe of 1-1:0.3 failed with error -5 [ 1219.925367][ T5841] sierra 1-1:0.3: Sierra USB modem converter detected [ 1220.108318][ T5841] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 1220.124505][ T5197] netlink: 372 bytes leftover after parsing attributes in process `syz.5.14311'. [ 1220.188810][ T5841] usb 1-1: USB disconnect, device number 118 [ 1220.206276][ T5841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1220.238822][ T5841] sierra 1-1:0.3: device disconnected [ 1220.451236][ T5211] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1221.178599][ T5246] loop1: detected capacity change from 0 to 128 [ 1221.258511][ T5246] overlay: filesystem on ./file0 not supported [ 1222.031016][ T5287] loop5: detected capacity change from 0 to 1024 [ 1222.045710][ T5287] EXT4-fs: Ignoring removed i_version option [ 1222.076927][ T5287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1222.114831][ T5287] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1222.158091][ T5287] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1222.198464][ T5287] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1222.205413][ T5287] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.14356: Freeing blocks not in datazone - block = 0, count = 4096 [ 1222.224415][ T5287] EXT4-fs (loop5): Remounting filesystem read-only [ 1222.231210][ T5287] EXT4-fs (loop5): 1 orphan inode deleted [ 1222.238438][ T5287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1222.433576][T24642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.805694][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 1222.805709][ T27] audit: type=1326 audit(2000000472.372:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1222.835861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.937573][ T27] audit: type=1326 audit(2000000472.372:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1222.961656][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.983881][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14362'. [ 1223.007990][ T5300] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14362'. [ 1223.045388][ T27] audit: type=1326 audit(2000000472.419:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.134878][ T27] audit: type=1326 audit(2000000472.419:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.211763][ T27] audit: type=1326 audit(2000000472.419:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.262380][ T27] audit: type=1326 audit(2000000472.419:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.367028][ T27] audit: type=1326 audit(2000000472.419:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.427442][ T27] audit: type=1326 audit(2000000472.419:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.524215][ T27] audit: type=1326 audit(2000000472.419:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5297 comm="syz.0.14361" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1223.548298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.237602][ T5841] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1224.238442][ T5357] loop2: detected capacity change from 0 to 512 [ 1224.282080][ T5357] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1224.290012][ T5357] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.14389: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1224.334204][ T5357] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.14389: ea_inode dec ref err=-117 [ 1224.370169][ T5357] EXT4-fs (loop2): 1 orphan inode deleted [ 1224.395711][ T5357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1224.454039][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 1224.472195][ T5841] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.498960][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.499266][ T5841] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1224.537717][ T5841] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1224.553963][ T5841] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1224.565282][ T5841] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 1224.577989][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.614322][ T5841] usb 1-1: Product: syz [ 1224.623930][ T5841] usb 1-1: Manufacturer: syz [ 1224.628574][ T5841] usb 1-1: SerialNumber: syz [ 1224.645053][ T5841] usb 1-1: config 0 descriptor?? [ 1224.690494][ T5371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14395'. [ 1224.707896][ T5371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14395'. [ 1224.940163][ T5380] loop5: detected capacity change from 0 to 512 [ 1224.978792][ T5380] EXT4-fs: Ignoring removed nobh option [ 1225.042123][ T5380] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #3: comm syz.5.14401: corrupted inode contents [ 1225.062528][ T5377] loop2: detected capacity change from 0 to 4096 [ 1225.098848][ T5380] EXT4-fs (loop5): Remounting filesystem read-only [ 1225.117273][ T5380] Quota error (device loop5): write_blk: dquota write failed [ 1225.127733][ T5841] usb 1-1: USB disconnect, device number 119 [ 1225.144718][ T5380] EXT4-fs (loop5): 1 truncate cleaned up [ 1225.187801][ T5380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.232838][ T5380] ext4 filesystem being mounted at /1512/proc supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.241097][ T5377] ntfs: volume version 3.1. [ 1225.393864][T24642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.435548][ T5388] ipt_REJECT: ECHOREPLY no longer supported. [ 1225.840532][ T5401] usb usb7: usbfs: process 5401 (syz.2.14408) did not claim interface 0 before use [ 1226.000805][T24773] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1226.134067][ T5413] loop1: detected capacity change from 0 to 256 [ 1226.237722][T24773] usb 6-1: Using ep0 maxpacket: 8 [ 1226.256955][T24773] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1226.285414][T24773] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.323053][T24773] usb 6-1: config 0 descriptor?? [ 1226.558280][ T5430] dlm: non-version read from control device 169 [ 1226.567907][T24773] usb 6-1: string descriptor 0 read error: -71 [ 1226.588529][T24773] uvcvideo 6-1:0.0: Found multiple Units with ID 1 [ 1226.595145][T24773] usb 6-1: Found UVC 0.00 device (2833:0201) [ 1226.613465][T24773] usb 6-1: No valid video chain found. [ 1226.636996][T24773] usb 6-1: USB disconnect, device number 16 [ 1226.862835][ T5450] dvmrp0: entered allmulticast mode [ 1227.223300][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14437'. [ 1227.251897][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14437'. [ 1227.272900][ T5464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14437'. [ 1227.335824][ T5470] netlink: 'syz.1.14440': attribute type 21 has an invalid length. [ 1227.379803][ T5470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14440'. [ 1227.947491][ T5498] loop1: detected capacity change from 0 to 256 [ 1228.156551][ T5502] loop2: detected capacity change from 0 to 1024 [ 1228.180007][ T5502] EXT4-fs: Ignoring removed i_version option [ 1228.249445][ T5502] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1228.282796][ T5502] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1228.329457][ T5502] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1228.345301][ T5502] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1228.365017][ T5502] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.14455: Freeing blocks not in datazone - block = 0, count = 4096 [ 1228.405992][ T5502] EXT4-fs (loop2): Remounting filesystem read-only [ 1228.420074][ T5841] libceph: connect (1)127.0.0.1:6789 error -101 [ 1228.436353][ T5502] EXT4-fs (loop2): 1 orphan inode deleted [ 1228.437278][ T5841] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1228.466567][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1228.495588][ T5523] netlink: 'syz.5.14463': attribute type 10 has an invalid length. [ 1228.506875][ T5523] netlink: 55 bytes leftover after parsing attributes in process `syz.5.14463'. [ 1228.607645][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.633620][ T5523] hsr_slave_1 (unregistering): left promiscuous mode [ 1228.763175][ T9] libceph: connect (1)127.0.0.1:6789 error -101 [ 1228.773695][ T9] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1228.800575][ T5841] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1229.005333][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1229.027513][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.048406][ T5841] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 1229.067609][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.085213][ T5529] loop2: detected capacity change from 0 to 32768 [ 1229.088783][ T5841] usb 1-1: config 0 descriptor?? [ 1229.116495][ T5841] xbox_remote_probe: endpoint_in message size==0? [ 1229.120803][ T5529] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.212473][ T5516] ceph: No mds server is up or the cluster is laggy [ 1229.251464][ T5529] XFS (loop2): Ending clean mount [ 1229.330274][ T5533] loop5: detected capacity change from 0 to 32768 [ 1229.343321][ T5841] usbhid 1-1:0.0: can't add hid device: -71 [ 1229.369965][ T5841] usbhid: probe of 1-1:0.0 failed with error -71 [ 1229.413778][ T5841] usb 1-1: USB disconnect, device number 120 [ 1229.416728][ T5533] JBD2: Ignoring recovery information on journal [ 1229.480049][ T5772] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.579888][ T5533] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1229.965808][T24642] ocfs2: Unmounting device (7,5) on (node local) [ 1230.054487][ T5555] dlm: no locking on control device [ 1231.044724][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1231.695934][ T5640] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1231.921723][ T5647] loop5: detected capacity change from 0 to 1024 [ 1232.036530][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14516'. [ 1232.674626][ T9] nvmet: connect request for invalid subsystem t! [ 1232.692881][ T5675] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 1233.284508][ T5682] loop2: detected capacity change from 0 to 32768 [ 1233.306804][ T5682] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.14527 (5682) [ 1233.390033][ T5682] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1233.427825][ T5682] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1233.452056][ T5682] BTRFS info (device loop2): enabling ssd optimizations [ 1233.477936][ T5682] BTRFS info (device loop2): not using ssd optimizations [ 1233.492458][ T5682] BTRFS info (device loop2): turning off barriers [ 1233.498939][ T5682] BTRFS info (device loop2): use no compression [ 1233.520688][ T5682] BTRFS info (device loop2): using free space tree [ 1233.808741][ T5682] BTRFS warning (device loop2): can't clear the compat_ro:8,compat_ro:9 feature bits while mounted [ 1233.987443][ T5772] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1234.326383][ T5745] netlink: 'syz.5.14547': attribute type 9 has an invalid length. [ 1234.674277][T24773] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1234.901123][T24773] usb 2-1: Using ep0 maxpacket: 8 [ 1234.921588][T24773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1234.946427][T24773] usb 2-1: config 8 interface 0 has no altsetting 0 [ 1234.958719][T24773] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=31.0a [ 1234.979213][T24773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.987351][T24773] usb 2-1: Product: syz [ 1235.019986][T24773] usb 2-1: Manufacturer: syz [ 1235.024973][T24773] usb 2-1: SerialNumber: syz [ 1235.031107][ T5781] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 1235.038399][ T5781] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1235.061199][T24773] usb 2-1: active config #8 != 1 ?? [ 1235.171228][ T5748] loop2: detected capacity change from 0 to 32768 [ 1235.235378][ T5748] JBD2: Ignoring recovery information on journal [ 1235.293797][ T5819] usb 2-1: USB disconnect, device number 98 [ 1235.329538][ T5798] openvswitch: netlink: Actions may not be safe on all matching packets [ 1235.362849][ T5748] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1235.658448][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 1236.376718][ T5852] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.14585'. [ 1236.403496][ T5852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1236.637850][ T5858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1237.038078][ T5886] netlink: 'syz.0.14600': attribute type 1 has an invalid length. [ 1237.378208][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14605'. [ 1237.390192][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14605'. [ 1237.729803][ T5910] netlink: 'syz.1.14611': attribute type 10 has an invalid length. [ 1237.868272][ T5910] bridge0: entered allmulticast mode [ 1237.890415][ T5910] team0: Port device bridge0 added [ 1237.901714][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14610'. [ 1238.091714][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1238.091728][ T27] audit: type=1326 audit(2000000486.680:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.2.14614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1238.182945][ T27] audit: type=1326 audit(2000000486.680:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.2.14614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1238.268490][ T27] audit: type=1326 audit(2000000486.680:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.2.14614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1238.346051][ T27] audit: type=1326 audit(2000000486.680:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.2.14614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1238.375195][ T27] audit: type=1326 audit(2000000486.680:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.2.14614" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1238.589007][ T5939] netlink: 'syz.1.14625': attribute type 10 has an invalid length. [ 1238.639549][ T5939] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1238.662658][ T5939] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1238.743322][ T5944] vivid-001: disconnect [ 1238.748121][ T5943] vivid-001: reconnect [ 1239.004773][ T5955] lo: entered promiscuous mode [ 1239.026893][ T5955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1239.499724][ T5976] loop1: detected capacity change from 0 to 1024 [ 1239.644598][ T5985] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1239.883524][T24773] libceph: connect (1)127.0.0.1:6789 error -101 [ 1239.890049][T24773] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1240.132641][ T6009] loop1: detected capacity change from 0 to 1024 [ 1240.159940][ T6009] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1240.181276][T24773] libceph: connect (1)127.0.0.1:6789 error -101 [ 1240.188882][T24773] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1240.217459][ T6009] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.14659: lblock 1 mapped to illegal pblock 1 (length 1) [ 1240.256430][ T6009] Quota error (device loop1): write_blk: dquota write failed [ 1240.269362][ T6009] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1240.294127][ T6009] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.14659: Failed to acquire dquot type 0 [ 1240.343888][ T6009] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.14659: Freeing blocks not in datazone - block = 0, count = 4096 [ 1240.372063][ T6009] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.14659: Invalid inode bitmap blk 0 in block_group 0 [ 1240.385766][ T49] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 1240.406960][ T6009] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 1240.418038][ T49] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1240.427771][ T6009] EXT4-fs (loop1): 1 orphan inode deleted [ 1240.434768][ T6009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1240.442582][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 0 [ 1240.563892][ T6009] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 1240.634832][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.712729][ T5992] ceph: No mds server is up or the cluster is laggy [ 1240.749605][T24773] libceph: connect (1)127.0.0.1:6789 error -101 [ 1240.757933][T24773] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1241.346981][ T27] audit: type=1326 audit(2000000489.722:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.0.14680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1241.384280][ T27] audit: type=1326 audit(2000000489.722:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.0.14680" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1241.408358][ C1] vkms_vblank_simulate: vblank timer overrun [ 1241.533117][ T6060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1241.584661][ T6063] ip6t_srh: unknown srh match flags 4000 [ 1241.738458][ T6068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1241.764211][ T6068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1241.924595][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14692'. [ 1242.056629][ T6080] bond5: entered promiscuous mode [ 1242.176074][ T6085] netlink: 'syz.5.14695': attribute type 10 has an invalid length. [ 1242.186159][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.193631][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.234455][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.242218][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1242.252823][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.260072][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1242.302348][ T6085] bridge0: entered promiscuous mode [ 1242.331259][ T6085] team0: Port device bridge0 added [ 1242.573894][ T6095] loop2: detected capacity change from 0 to 2048 [ 1242.603216][ T6095] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1242.671098][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1242.692582][ T6103] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1242.799067][ T6095] NILFS (loop2): unrecognized mount option "01777777777777777777777ÿ017777777777777777777770xffffffffffffffffÿÿ1844674407370955161501777777777777777777777ÿÿ0x0000000000000000¬-[[‰EÕ~xidŽ¾¸Òq—c´¿?fg¿r&Ò³Y?&!Žš_º.}Afx}§7³€_°¦‚â‘RqòÀ)a· 64) [ 1275.968100][ T7329] erofs: (device loop2): mounted with root inode @ nid 36. [ 1275.991214][ T7311] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1276.022554][ T7311] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 1276.056939][ T7311] F2FS-fs (loop1): invalid crc value [ 1276.106882][ T7311] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1276.182547][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.189840][ C1] bridge0: topology change detected, propagating [ 1276.198276][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.205545][ C1] bridge0: topology change detected, propagating [ 1276.305762][ T7311] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1276.329373][ T7311] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1276.353567][ T7344] loop5: detected capacity change from 0 to 128 [ 1276.370107][ T7344] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1276.428716][ T7344] FAT-fs (loop5): Filesystem has been set read-only [ 1276.769306][ T7356] loop5: detected capacity change from 0 to 764 [ 1277.020042][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15311'. [ 1277.187181][ T7372] netlink: 'syz.2.15313': attribute type 1 has an invalid length. [ 1277.342562][ T7378] loop1: detected capacity change from 0 to 256 [ 1277.396851][ T7378] exfat: Deprecated parameter 'utf8' [ 1277.412548][ T7378] exfat: Deprecated parameter 'namecase' [ 1277.447457][ T7378] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1277.897560][ T7400] loop5: detected capacity change from 0 to 764 [ 1278.575374][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15341'. [ 1278.943824][ T7442] loop1: detected capacity change from 0 to 512 [ 1278.994880][ T7442] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1279.028824][ T7442] EXT4-fs (loop1): invalid journal inode [ 1279.034844][ T27] kauditd_printk_skb: 5081 callbacks suppressed [ 1279.034858][ T27] audit: type=1326 audit(2000000524.992:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.15350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1279.079523][ T7442] EXT4-fs (loop1): can't get journal size [ 1279.100744][ T7442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 1279.119972][ T27] audit: type=1326 audit(2000000524.992:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.15350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1279.138428][ T7442] System zones: [ 1279.144763][ T27] audit: type=1326 audit(2000000524.992:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.15350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1279.172455][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.179672][ T27] audit: type=1326 audit(2000000524.992:5825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.15350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1279.204396][ T27] audit: type=1326 audit(2000000524.992:5826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.2.15350" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa679e159 code=0x7ffc0000 [ 1279.228017][ T7442] 1-12 [ 1279.228541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.252389][ T7442] , 13-13 [ 1279.261005][ T7442] EXT4-fs (loop1): 1 truncate cleaned up [ 1279.267863][ T7442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.357087][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.484451][T14917] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 1279.609233][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.615697][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1279.700571][T14917] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1279.712277][T14917] usb 3-1: not running at top speed; connect to a high speed hub [ 1279.729928][T14917] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.751878][T14917] usb 3-1: config 1 interface 0 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1279.763766][ T7465] netlink: 'syz.1.15360': attribute type 2 has an invalid length. [ 1279.767159][ T5841] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1279.772830][ T7465] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.15360'. [ 1279.807376][T14917] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1279.820722][T14917] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1279.830429][T14917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.848113][T14917] usb 3-1: Product: syz [ 1279.858517][T14917] usb 3-1: Manufacturer: syz [ 1279.869129][T14917] usb 3-1: SerialNumber: syz [ 1279.994337][ T7472] netlink: zone id is out of range [ 1280.000889][ T7472] netlink: zone id is out of range [ 1280.011660][ T7472] netlink: zone id is out of range [ 1280.016884][ T7472] netlink: zone id is out of range [ 1280.024063][ T5841] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1280.035207][ T7472] netlink: zone id is out of range [ 1280.040639][ T7472] netlink: get zone limit has 4 unknown bytes [ 1280.050367][ T5841] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.060749][ T5841] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1280.070334][ T5841] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1280.114199][T14917] cdc_ether 3-1:1.0: skipping garbage [ 1280.122431][ T5841] usb 6-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1280.134752][T14917] usb 3-1: bad CDC descriptors [ 1280.148151][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.160151][T14917] usb 3-1: USB disconnect, device number 102 [ 1280.179293][ T5841] usb 6-1: Product: syz [ 1280.183497][ T5841] usb 6-1: Manufacturer: syz [ 1280.188114][ T5841] usb 6-1: SerialNumber: syz [ 1280.393341][T24773] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1280.438601][ T5841] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 1280.451772][ T5841] usb 6-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 1280.463679][ T5841] usb 6-1: 1:1 : unsupported format bits 0x33820006 [ 1280.482134][ T5841] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1280.501952][ T5841] usb 6-1: unit 2 not found! [ 1280.506601][ T5841] usb 6-1: unit 0 not found! [ 1280.563071][ T5841] usb 6-1: USB disconnect, device number 22 [ 1280.594672][ T6714] udevd[6714]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.628311][T24773] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1280.637216][T24773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.662635][T24773] usb 2-1: config 0 has no interface number 0 [ 1280.674092][T24773] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1280.691092][T24773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.699925][T24773] usb 2-1: Product: syz [ 1280.712127][T24773] usb 2-1: Manufacturer: syz [ 1280.747657][T24773] usb 2-1: SerialNumber: syz [ 1280.770369][T24773] usb 2-1: config 0 descriptor?? [ 1280.801076][ T7494] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.15373'. [ 1281.005436][T24773] usb 2-1: USB disconnect, device number 102 [ 1281.204768][ T7508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15382'. [ 1281.211246][ T7510] loop5: detected capacity change from 0 to 64 [ 1281.288417][ T7512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15383'. [ 1281.299898][ T7512] netlink: 64 bytes leftover after parsing attributes in process `syz.2.15383'. [ 1281.383684][ T7514] netlink: 'syz.2.15385': attribute type 10 has an invalid length. [ 1281.399712][ T7514] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.15385'. [ 1281.411902][ T7514] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1281.867260][ T7530] loop5: detected capacity change from 0 to 8192 [ 1281.882529][ T7530] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1281.905465][ T7530] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 1281.927263][ T7530] REISERFS (device loop5): using ordered data mode [ 1281.945405][ T7530] reiserfs: using flush barriers [ 1281.965198][ T7530] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1282.065296][ T7530] REISERFS (device loop5): checking transaction log (loop5) [ 1282.124141][ T7530] REISERFS (device loop5): Using r5 hash to sort names [ 1282.384075][ T7554] loop5: detected capacity change from 0 to 764 [ 1282.640980][ T7560] loop5: detected capacity change from 0 to 64 [ 1282.958702][ T7572] bond6: option ad_select: invalid value (4) [ 1282.974178][ T7572] bond6 (unregistering): Released all slaves [ 1283.073074][ T7580] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15414'. [ 1283.348729][ T7586] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1283.368024][ T7591] netlink: 'syz.0.15421': attribute type 6 has an invalid length. [ 1283.506624][ T7598] loop2: detected capacity change from 0 to 64 [ 1284.376807][ T7637] lo: entered allmulticast mode [ 1284.641923][ T7650] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15447'. [ 1284.732244][ T7652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15450'. [ 1285.130113][ T7669] Cannot find del_set index 286 as target [ 1285.296765][ T7675] netlink: 'syz.0.15459': attribute type 9 has an invalid length. [ 1285.324806][ T7675] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.15459'. [ 1285.469649][T24773] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1285.595070][ T7692] netlink: 392 bytes leftover after parsing attributes in process `syz.0.15465'. [ 1285.675230][ T7696] loop1: detected capacity change from 0 to 64 [ 1285.695327][T24773] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1285.706446][T24773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.737981][T24773] usb 6-1: Product: syz [ 1285.751529][T24773] usb 6-1: Manufacturer: syz [ 1285.777882][T24773] usb 6-1: SerialNumber: syz [ 1286.131167][T24773] usb 6-1: Can't get UAC3 power state for id 10 [ 1286.186564][T24773] usb 6-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 1286.206168][T24773] usb 6-1: incorrect wMaxPacketSize 0x10 for BADD profile [ 1286.339847][T24773] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1286.379724][T24773] usb 6-1: USB disconnect, device number 23 [ 1286.451111][ T5868] udevd[5868]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.257567][ T7755] netlink: 'syz.1.15497': attribute type 1 has an invalid length. [ 1288.106719][ T7788] loop1: detected capacity change from 0 to 4096 [ 1288.156460][ T7788] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 1288.286034][ T7788] ntfs3: loop1: Failed to load $Extend (-2). [ 1288.321846][ T7788] ntfs3: loop1: Failed to initialize $Extend. [ 1288.763799][ T7815] bond3: option ad_select: invalid value (4) [ 1288.830171][ T7815] bond3 (unregistering): Released all slaves [ 1288.864332][ T7825] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl812) [ 1289.154231][ T7831] loop1: detected capacity change from 0 to 4096 [ 1289.664023][ T7856] loop2: detected capacity change from 0 to 512 [ 1289.703923][ T7856] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1289.783689][ T7856] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.15534: Allocating blocks 41-42 which overlap fs metadata [ 1289.872164][ T7856] EXT4-fs (loop2): Remounting filesystem read-only [ 1289.878832][ T7856] Quota error (device loop2): write_blk: dquota write failed [ 1289.956926][ T7856] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1289.966292][ T7856] Quota error (device loop2): write_blk: dquota write failed [ 1290.021843][ T7856] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1290.055755][ T7856] EXT4-fs (loop2): 1 truncate cleaned up [ 1290.062695][ T7856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.229473][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.566477][ T7891] loop2: detected capacity change from 0 to 512 [ 1290.584513][ T7891] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1290.779527][ T27] audit: type=1326 audit(2000000535.978:5827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.15554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1290.869138][ T27] audit: type=1326 audit(2000000535.978:5828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.15554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1290.965854][ T27] audit: type=1326 audit(2000000535.978:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.15554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1290.990028][ C1] vkms_vblank_simulate: vblank timer overrun [ 1291.089966][ T27] audit: type=1326 audit(2000000535.978:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.15554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1291.186267][ T27] audit: type=1326 audit(2000000536.006:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.15554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1291.264666][ T27] audit: type=1326 audit(2000000536.006:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.15554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1291.423257][ T7917] netlink: 'syz.2.15563': attribute type 1 has an invalid length. [ 1291.431148][ T7917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15563'. [ 1291.509928][ T7917] nbd: must specify at least one socket [ 1291.640016][ T7895] loop5: detected capacity change from 0 to 32768 [ 1291.674600][ T7925] overlayfs: missing 'lowerdir' [ 1291.681060][ T7895] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.15552 (7895) [ 1291.751289][ T7895] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1291.796555][ T7895] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1291.835666][ T7895] BTRFS info (device loop5): force zlib compression, level 3 [ 1291.859051][ T7895] BTRFS info (device loop5): allowing degraded mounts [ 1291.865900][ T7895] BTRFS info (device loop5): setting nodatasum [ 1291.897769][ T7895] BTRFS info (device loop5): allowing degraded mounts [ 1291.941348][ T7895] BTRFS info (device loop5): using free space tree [ 1292.104793][ T7895] BTRFS info (device loop5): auto enabling async discard [ 1292.265106][T24642] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1292.397096][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15578'. [ 1292.596593][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1292.922599][ T7982] loop1: detected capacity change from 0 to 1024 [ 1292.946062][ T7982] syz.1.15587: attempt to access beyond end of device [ 1292.946062][ T7982] loop1: rw=0, sector=196608, nr_sectors = 8 limit=1024 [ 1292.980926][ T7982] Buffer I/O error on dev loop1, logical block 24576, async page read [ 1293.017548][ T7982] hfsplus: failed to load extents file [ 1293.107847][ T9740] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1293.274835][ T7991] kAFS: unparsable volume name [ 1293.626882][ T8003] netlink: 'syz.5.15597': attribute type 21 has an invalid length. [ 1293.687616][ T8003] netlink: 'syz.5.15597': attribute type 6 has an invalid length. [ 1293.707650][ T8003] netlink: 132 bytes leftover after parsing attributes in process `syz.5.15597'. [ 1293.931616][ T7986] loop2: detected capacity change from 0 to 32768 [ 1293.993445][ T7986] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 1293.993445][ T7986] [ 1294.038378][ T7986] ERROR: (device loop2): remounting filesystem as read-only [ 1294.369313][ T8028] netlink: 45 bytes leftover after parsing attributes in process `syz.1.15609'. [ 1294.391669][ T8027] loop5: detected capacity change from 0 to 2048 [ 1294.432980][ T8027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1294.939905][ T8050] PM: Enabling pm_trace changes system date and time during resume. [ 1294.939905][ T8050] PM: Correct system time has to be restored manually after resume. [ 1295.832976][ T8094] netlink: 'syz.2.15640': attribute type 1 has an invalid length. [ 1295.874272][ T8094] netlink: 232 bytes leftover after parsing attributes in process `syz.2.15640'. [ 1296.004826][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15643'. [ 1296.025874][ T8102] w: renamed from gre0 [ 1296.045681][ T8102] w: entered promiscuous mode [ 1296.052692][ T8102] w: entered allmulticast mode [ 1296.057626][ T8102] A link change request failed with some changes committed already. Interface w may have been left with an inconsistent configuration, please check. [ 1296.491837][ T8123] loop1: detected capacity change from 0 to 1024 [ 1296.588260][ T8126] loop2: detected capacity change from 0 to 64 [ 1296.983376][ T8109] loop5: detected capacity change from 0 to 32768 [ 1296.992727][ T8139] loop1: detected capacity change from 0 to 1024 [ 1297.042185][ T8139] hfsplus: invalid length 1280 has been corrected to 255 [ 1297.055235][ T8139] hfsplus: invalid length 1280 has been corrected to 255 [ 1297.062440][ T8139] hfsplus: invalid length 1280 has been corrected to 255 [ 1297.123950][ T8109] ERROR: (device loop5): dbAllocAG: unable to allocate blocks [ 1297.123950][ T8109] [ 1297.149972][ T8109] jfs_rename: dtInsert returned -EIO [ 1297.708051][ T8166] loop2: detected capacity change from 0 to 512 [ 1297.732692][ T8166] EXT4-fs: Ignoring removed i_version option [ 1297.763011][ T8166] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1297.812844][ T8166] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1297.917387][ T8175] loop1: detected capacity change from 0 to 256 [ 1297.925331][ T8166] __quota_error: 2 callbacks suppressed [ 1297.925347][ T8166] Quota error (device loop2): write_blk: dquota write failed [ 1297.982307][ T8166] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1297.984067][ T8175] exfat: Deprecated parameter 'utf8' [ 1297.999413][ T8166] Quota error (device loop2): write_blk: dquota write failed [ 1298.018363][ T27] audit: type=1326 audit(2000000542.754:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.15681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1298.029318][ T8166] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1298.055330][ T8166] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.15673: Failed to acquire dquot type 1 [ 1298.077550][ T27] audit: type=1326 audit(2000000542.754:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.15681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1298.078129][ T8166] EXT4-fs (loop2): 1 truncate cleaned up [ 1298.130058][ T27] audit: type=1326 audit(2000000542.763:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.15681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1298.155951][ T8166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1298.174352][ T5819] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1298.190223][ T27] audit: type=1326 audit(2000000542.791:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.15681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1298.220174][ T8175] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1298.283064][ T27] audit: type=1326 audit(2000000542.791:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.15681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1298.365720][ T27] audit: type=1326 audit(2000000542.791:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8180 comm="syz.0.15681" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1298.401629][ T5819] usb 6-1: Using ep0 maxpacket: 16 [ 1298.411980][ T5819] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1298.430747][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.451591][ T5819] usb 6-1: config 0 descriptor?? [ 1298.480782][ T5819] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1298.580874][ T7720] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1298.698442][ T5819] usb 6-1: Detected FT232B [ 1298.818743][ T7720] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 29295, setting to 1024 [ 1298.841830][ T7720] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1298.861170][ T7720] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01 [ 1298.890290][ T7720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.898363][ T7720] usb 3-1: Product: syz [ 1298.924347][ T5819] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1298.944517][ T7720] usb 3-1: Manufacturer: syz [ 1298.949700][ T7720] usb 3-1: SerialNumber: syz [ 1298.954486][ T5819] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1298.979224][ T5819] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1299.008231][ T5819] usb 6-1: USB disconnect, device number 24 [ 1299.042202][ T5819] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1299.079549][ T5819] ftdi_sio 6-1:0.0: device disconnected [ 1299.225694][ T7720] ipheth 3-1:1.0: ipheth_get_macaddr: usb_control_msg: -71 [ 1299.248226][ T7720] ipheth: probe of 3-1:1.0 failed with error -71 [ 1299.298102][ T7720] apple-mfi-fastcharge 3-1: USB disconnect, device number 103 [ 1299.350032][ T8221] netlink: 'syz.0.15698': attribute type 7 has an invalid length. [ 1299.552998][ T8230] netlink: 'syz.0.15701': attribute type 51 has an invalid length. [ 1299.606040][ T8232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15702'. [ 1299.900366][ T8242] veth3: entered promiscuous mode [ 1299.922382][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.948078][ T8247] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1300.358756][ T8266] Unsupported ieee802154 address type: 0 [ 1300.387060][ T8270] loop2: detected capacity change from 0 to 256 [ 1300.457134][ T8270] 9pnet_fd: p9_fd_create_unix (8270): problem connecting socket: ./file1: -1 [ 1301.489136][ T5837] kworker/dying (5837) used greatest stack depth: 15688 bytes left [ 1301.526549][ T8323] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1301.779327][ T8336] SET target dimension over the limit! [ 1302.098050][ T8349] loop2: detected capacity change from 0 to 8 [ 1302.129173][ T8349] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1302.159155][ T8349] SQUASHFS error: Failed to read block 0x9b: -5 [ 1302.178663][ T8349] SQUASHFS error: Unable to read metadata cache entry [99] [ 1302.211516][ T8349] SQUASHFS error: Unable to read inode 0x127 [ 1302.313508][ T8318] loop1: detected capacity change from 0 to 32768 [ 1302.334852][ T8318] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.15737 (8318) [ 1302.402040][ T8318] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1302.444448][ T8318] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1302.472025][ T8318] BTRFS info (device loop1): force zlib compression, level 3 [ 1302.480186][ T8318] BTRFS info (device loop1): allowing degraded mounts [ 1302.489820][ T8318] BTRFS info (device loop1): setting nodatasum [ 1302.544802][ T8318] BTRFS info (device loop1): allowing degraded mounts [ 1302.577034][ T8318] BTRFS info (device loop1): using free space tree [ 1302.625844][ T8360] loop5: detected capacity change from 0 to 4096 [ 1302.710172][ T8318] BTRFS info (device loop1): auto enabling async discard [ 1302.800585][ T8360] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1302.962071][ T5773] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1303.692696][ T8413] x_tables: unsorted underflow at hook 2 [ 1304.302693][ T8437] loop5: detected capacity change from 0 to 4096 [ 1304.333327][ T8442] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1304.964018][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15799'. [ 1305.090417][ T8473] x_tables: duplicate entry at hook 2 [ 1305.093819][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15801'. [ 1305.120301][ T8471] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1305.136523][ T8471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15801'. [ 1305.252790][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15804'. [ 1305.280695][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15804'. [ 1305.322361][ T8480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15804'. [ 1305.353408][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15804'. [ 1305.387875][ T8480] netlink: 5 bytes leftover after parsing attributes in process `syz.1.15804'. [ 1305.729909][ T8503] loop2: detected capacity change from 0 to 256 [ 1305.798140][ T8503] FAT-fs (loop2): Directory bread(block 64) failed [ 1305.825561][ T8503] FAT-fs (loop2): Directory bread(block 65) failed [ 1305.836549][ T8503] FAT-fs (loop2): Directory bread(block 66) failed [ 1305.843576][ T8503] FAT-fs (loop2): Directory bread(block 67) failed [ 1305.894340][ T8503] FAT-fs (loop2): Directory bread(block 68) failed [ 1305.916895][ T8503] FAT-fs (loop2): Directory bread(block 69) failed [ 1305.927779][ T8503] FAT-fs (loop2): Directory bread(block 70) failed [ 1305.940646][ T8503] FAT-fs (loop2): Directory bread(block 71) failed [ 1305.976666][ T8503] FAT-fs (loop2): Directory bread(block 72) failed [ 1305.983251][ T8503] FAT-fs (loop2): Directory bread(block 73) failed [ 1306.229067][ T8516] netlink: 'syz.1.15823': attribute type 1 has an invalid length. [ 1306.378274][ T8522] ./file0: Can't lookup blockdev [ 1306.688285][ T8504] loop5: detected capacity change from 0 to 40427 [ 1306.752855][ T8504] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 1306.776660][ T8504] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1306.816132][ T8504] F2FS-fs (loop5): invalid crc value [ 1306.848771][ T8504] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1306.958398][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1307.063896][ T8504] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1307.097852][ T8504] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1307.426695][ T8558] loop2: detected capacity change from 0 to 4096 [ 1307.448516][ T8558] __ntfs_warning: 3 callbacks suppressed [ 1307.448531][ T8558] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1307.484683][ T8558] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 1307.542976][ T8558] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1307.582535][ T8558] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1307.640746][ T8558] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1307.674317][ T8558] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1307.751296][ T8558] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1307.771458][ T8558] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1307.846352][ T8558] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 1307.855144][ T8558] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 1307.962335][ T8558] ntfs: volume version 3.1. [ 1307.986577][ T8578] i2c i2c-0: Invalid block write size 59 [ 1308.165041][ T8583] loop1: detected capacity change from 0 to 736 [ 1308.511098][ T8593] overlay: Unknown parameter 'smackfstransmute' [ 1308.593354][ T8595] netlink: 76 bytes leftover after parsing attributes in process `syz.1.15858'. [ 1308.851320][ T8605] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15863'. [ 1309.352369][ T8626] block device autoloading is deprecated and will be removed. [ 1309.385467][ T8625] loop5: detected capacity change from 0 to 4096 [ 1309.392728][ T8626] syz.1.15872: attempt to access beyond end of device [ 1309.392728][ T8626] md133: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1309.465899][ T8625] ntfs3: loop5: ino=9, mi_enum_attr [ 1309.484273][ T8625] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1309.514358][ T8625] ntfs3: loop5: ino=9, mi_enum_attr [ 1309.521243][ T8625] ntfs3: loop5: ino=b, mi_enum_attr [ 1309.546560][ T8625] ntfs3: loop5: Failed to load $Extend (-22). [ 1309.570519][ T8625] ntfs3: loop5: Failed to initialize $Extend. [ 1309.891702][ T8641] loop1: detected capacity change from 0 to 4096 [ 1309.904981][ T8647] netlink: 'syz.5.15883': attribute type 1 has an invalid length. [ 1309.922101][ T8647] netlink: 'syz.5.15883': attribute type 2 has an invalid length. [ 1309.940829][ T8641] ntfs: volume version 3.1. [ 1310.277162][ T8661] loop5: detected capacity change from 0 to 16 [ 1310.297120][ T8661] erofs: (device loop5): mounted with root inode @ nid 36. [ 1310.303524][ T8660] geneve1: entered promiscuous mode [ 1310.326447][ T8661] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 1310.343044][ T8661] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1310.354389][ T8661] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 0 @ lcn 0 of nid 36 [ 1310.365099][ T8661] erofs: (device loop5): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1310.388820][ T8661] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 1310.532539][ T8666] __nla_validate_parse: 4 callbacks suppressed [ 1310.532564][ T8666] netlink: 296 bytes leftover after parsing attributes in process `syz.0.15893'. [ 1310.777933][ T8679] loop5: detected capacity change from 0 to 512 [ 1310.894371][ T8679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.972898][ T8679] ext4 filesystem being mounted at /1850/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.079134][ T8679] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2974: inode #15: comm syz.5.15898: corrupted xattr block 33: invalid checksum [ 1311.135599][ T8679] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -74) [ 1311.190220][ T8696] wg1: entered promiscuous mode [ 1311.225949][T24642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.609874][ T8714] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1311.790929][ T8725] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1311.944900][ T8730] geneve1: entered promiscuous mode [ 1311.975870][ T8728] loop1: detected capacity change from 0 to 4096 [ 1311.977562][ T8732] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 1311.994206][ T8728] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 1312.083985][ T8728] ntfs3: loop1: ino=19, mi_enum_attr [ 1312.109063][ T8728] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1312.149896][ T8728] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 1312.197281][ T8738] binder: 8736:8738 ioctl 400c620e 200000000040 returned -22 [ 1312.262490][ T8728] ntfs3: loop1: failed to convert "c46c" to macgreek [ 1312.294545][ T8728] ntfs3: loop1: ino=20, mi_enum_attr [ 1312.645797][ T8754] loop2: detected capacity change from 0 to 2048 [ 1312.699400][ T8754] loop2: p4 < > [ 1312.851347][ T5772] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 1312.866194][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1312.889343][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1312.938424][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1312.964340][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.017364][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.027627][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.087238][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.129962][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.188315][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.218248][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.263116][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.386756][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1313.434202][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.443424][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.456633][ T8801] netlink: 512 bytes leftover after parsing attributes in process `syz.2.15951'. [ 1313.477487][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.516894][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.541514][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.568010][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.596891][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.612855][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15954'. [ 1313.630683][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1313.714556][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15955'. [ 1313.756825][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15955'. [ 1313.770696][ T8817] loop1: detected capacity change from 0 to 512 [ 1315.700847][ T8943] binder: 8940:8943 unknown command 1074553619 [ 1315.742242][ T8943] binder: 8940:8943 ioctl c0306201 200000000640 returned -22 [ 1315.787737][ T8949] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1315.948570][ T8952] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1315.985169][ T8966] CIFS mount error: No usable UNC path provided in device string! [ 1315.985169][ T8966] [ 1316.036161][ T8966] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1316.306258][ T8992] binder: 8991:8992 ioctl 400c620e ffffffffffffffff returned -14 [ 1316.314244][T14917] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1316.433849][ T9000] veth0_macvtap: entered allmulticast mode [ 1316.444978][ T9000] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1316.525706][T14917] usb 2-1: Using ep0 maxpacket: 32 [ 1316.551175][T14917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.565808][T14917] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1316.597185][T14917] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 1316.621013][T14917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1316.640053][T14917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1316.673937][T14917] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 1316.690634][T14917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.707948][T14917] usb 2-1: Product: syz [ 1316.712166][T14917] usb 2-1: Manufacturer: syz [ 1316.727709][T14917] usb 2-1: SerialNumber: syz [ 1316.750172][T14917] usb 2-1: config 0 descriptor?? [ 1316.769150][ T8973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.780146][T14917] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1316.792748][ T5811] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1317.003458][ T5811] usb 6-1: Using ep0 maxpacket: 8 [ 1317.014808][ T5811] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 1317.025157][ T5811] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1317.030518][T14917] usb 2-1: USB disconnect, device number 103 [ 1317.033934][ T5811] usb 6-1: config 3 has no interface number 0 [ 1317.057953][ T5811] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.079302][ T5811] usb 6-1: config 3 interface 45 has no altsetting 0 [ 1317.122556][ T5811] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 1317.149378][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.167668][ T5811] usb 6-1: Product: syz [ 1317.172042][ T5811] usb 6-1: Manufacturer: syz [ 1317.178368][ T5811] usb 6-1: SerialNumber: syz [ 1317.206732][ T9] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1317.342252][ T9052] loop2: detected capacity change from 0 to 4096 [ 1317.351848][ T9052] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1317.381402][ T9052] ntfs3: loop2: ino=19, mi_enum_attr [ 1317.386877][ T9052] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1317.397123][ T9052] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1317.457680][ T9052] ntfs3: loop2: failed to convert "c46c" to macgreek [ 1317.463876][ T5841] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1317.474721][ T5811] usb 6-1: USB disconnect, device number 25 [ 1317.481877][ T9052] ntfs3: loop2: ino=20, mi_enum_attr [ 1317.509542][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.601029][ T9071] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1317.676428][ T5841] usb 1-1: Using ep0 maxpacket: 32 [ 1317.693928][ T5841] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1317.704287][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.722388][ T5841] usb 1-1: Product: syz [ 1317.733366][ T5841] usb 1-1: Manufacturer: syz [ 1317.749566][ T5841] usb 1-1: SerialNumber: syz [ 1317.760652][ T5841] usb 1-1: config 0 descriptor?? [ 1317.773734][ T5841] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1317.817020][ T9083] ieee802154 phy0 wpan0: encryption failed: -90 [ 1317.986446][T14917] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1317.997506][ T5841] gspca_ov534_9: reg_w failed -71 [ 1318.258472][ T9740] blk_print_req_error: 122 callbacks suppressed [ 1318.258489][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1318.277170][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.323458][ T9740] buffer_io_error: 100 callbacks suppressed [ 1318.323471][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.361453][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.370719][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.389283][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.407508][ T9127] netlink: 'syz.1.16027': attribute type 1 has an invalid length. [ 1318.416322][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.426128][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.444081][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16027'. [ 1318.467103][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.475790][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.493113][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.548380][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1318.563401][ T5841] gspca_ov534_9: Unknown sensor 0000 [ 1318.563485][ T5841] ov534_9: probe of 1-1:0.0 failed with error -22 [ 1318.575245][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.581919][ T5841] usb 1-1: USB disconnect, device number 124 [ 1318.613942][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.639392][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.677887][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.701350][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1318.726064][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.736463][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1318.747717][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1320.454250][ T9258] xt_ecn: cannot match TCP bits for non-tcp packets [ 1321.125639][ T9302] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16081'. [ 1321.496311][ T9330] tmpfs: Bad value for 'mpol' [ 1321.769135][ T9349] netlink: 100 bytes leftover after parsing attributes in process `syz.5.16095'. [ 1322.044314][ T9376] netlink: 'syz.5.16101': attribute type 29 has an invalid length. [ 1322.100861][ T9376] netlink: 'syz.5.16101': attribute type 29 has an invalid length. [ 1322.132663][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.155894][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.172944][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.182812][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.192416][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.204885][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.211762][ T5841] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1322.216537][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16102'. [ 1322.235906][ T9386] loop5: detected capacity change from 0 to 64 [ 1322.321412][ T9389] [U] ªeÍ[è¯Â¦Ooj°4Ò¥¶1=³Ú™ªß7yoÕü|.Â2àõ-s^Š™²{ [ 1322.422132][ T5841] usb 1-1: Using ep0 maxpacket: 8 [ 1322.459448][ T5841] usb 1-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1322.477175][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1322.500605][ T5841] usb 1-1: Product: syz [ 1322.508245][ T5841] usb 1-1: Manufacturer: syz [ 1322.523736][ T5841] usb 1-1: SerialNumber: syz [ 1322.548644][ T5841] usb 1-1: config 0 descriptor?? [ 1322.566469][ T5841] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1322.977629][T24773] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 1322.999545][ T5841] gspca_sn9c2028: read1 error -71 [ 1323.014615][ T5841] gspca_sn9c2028: read1 error -71 [ 1323.021007][ T5841] sn9c2028: probe of 1-1:0.0 failed with error -71 [ 1323.034839][ T5841] usb 1-1: USB disconnect, device number 125 [ 1323.183714][ T9458] netlink: 'syz.1.16119': attribute type 29 has an invalid length. [ 1323.204546][ T9458] netlink: 'syz.1.16119': attribute type 29 has an invalid length. [ 1323.214540][T24773] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.238515][T24773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1323.265119][T24773] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1323.290104][T24773] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1323.309564][T24773] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1323.328858][T24773] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1323.338418][T24773] usb 6-1: Manufacturer: syz [ 1323.343313][ T9466] loop1: detected capacity change from 0 to 1024 [ 1323.370299][T24773] usb 6-1: config 0 descriptor?? [ 1323.375559][ C1] ip6_tunnel: ip6gretap4 xmit: Local address not yet configured! [ 1323.376033][ T9466] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1323.412808][ T9466] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.16122: iget: bad i_size value: -360287970189638630 [ 1323.431440][ T9466] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.16122: couldn't read orphan inode 13 (err -117) [ 1323.453906][ T9466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1323.581809][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1323.790299][ T5766] blk_print_req_error: 152 callbacks suppressed [ 1323.790316][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1323.806530][T24773] rc_core: IR keymap rc-hauppauge not found [ 1323.817314][T24773] Registered IR keymap rc-empty [ 1323.833259][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1323.844715][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.888160][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1323.894988][ T5766] buffer_io_error: 125 callbacks suppressed [ 1323.895001][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1323.912270][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1323.924446][T24773] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1323.955347][T24773] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input84 [ 1323.969634][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1323.991636][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.005699][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.015490][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.022742][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.034423][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.043793][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.053243][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.061948][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.099019][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.131167][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.166144][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.199662][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1324.219661][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.247598][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.257934][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.271276][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.298881][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.333891][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.341188][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.360008][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.371667][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.412705][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.421983][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.430976][ T5766] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1324.452145][T24773] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1324.509973][T24773] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1324.532601][T24773] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1324.574190][T24773] usb 6-1: USB disconnect, device number 26 [ 1324.827773][ T9565] bridge_slave_1: left allmulticast mode [ 1324.839370][ T9565] bridge_slave_1: left promiscuous mode [ 1324.856103][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.894474][ T9565] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1325.611553][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1325.611568][ T27] audit: type=1326 audit(2000000568.582:5854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1325.700226][ T27] audit: type=1326 audit(2000000568.619:5855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1325.774965][ T9630] loop1: detected capacity change from 0 to 16 [ 1325.776698][ T27] audit: type=1326 audit(2000000568.619:5856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1325.847951][ T9630] erofs: (device loop1): mounted with root inode @ nid 36. [ 1325.884411][ T27] audit: type=1326 audit(2000000568.628:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1326.027962][ T27] audit: type=1326 audit(2000000568.628:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1326.068389][ T27] audit: type=1326 audit(2000000568.628:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1326.152781][ T27] audit: type=1326 audit(2000000568.628:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1326.225753][ T27] audit: type=1326 audit(2000000568.628:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1326.227745][ T9656] __nla_validate_parse: 42 callbacks suppressed [ 1326.227760][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16170'. [ 1326.296259][ T9662] kAFS: unable to lookup cell '(,c¾û/' [ 1326.302391][ T27] audit: type=1326 audit(2000000568.628:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.0.16161" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef5b59e159 code=0x7ffc0000 [ 1326.468675][ T9671] loop2: detected capacity change from 0 to 64 [ 1326.586944][ T9681] loop1: detected capacity change from 0 to 16 [ 1326.601178][ T9681] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1326.822794][ T9695] netlink: 'syz.2.16177': attribute type 7 has an invalid length. [ 1327.475636][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1328.089956][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.098164][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.120288][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.149608][ T9770] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1328.203884][ T9770] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1328.363767][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.396342][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.398282][ T9748] loop1: detected capacity change from 0 to 32768 [ 1328.435092][ T9748] JBD2: Ignoring recovery information on journal [ 1328.469489][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.478230][ T9770] wg1 speed is unknown, defaulting to 1000 [ 1328.498996][ T9748] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1328.674513][ T9748] (syz.1.16191,9748,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1328.742545][ T9800] [ 1328.744911][ T9800] ====================================================== [ 1328.751936][ T9800] WARNING: possible circular locking dependency detected [ 1328.758987][ T9800] syzkaller #0 Not tainted [ 1328.763416][ T9800] ------------------------------------------------------ [ 1328.770427][ T9800] syz.5.16205/9800 is trying to acquire lock: [ 1328.776483][ T9800] ffff88806aabc0b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 1328.785623][ T9800] [ 1328.785623][ T9800] but task is already holding lock: [ 1328.792974][ T9800] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1328.801904][ T9800] [ 1328.801904][ T9800] which lock already depends on the new lock. [ 1328.801904][ T9800] [ 1328.812303][ T9800] [ 1328.812303][ T9800] the existing dependency chain (in reverse order) is: [ 1328.821321][ T9800] [ 1328.821321][ T9800] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 1328.828706][ T9800] __mutex_lock+0x135/0xc80 [ 1328.833731][ T9800] rfcomm_security_cfm+0x41/0x550 [ 1328.839270][ T9800] hci_auth_complete_evt+0x366/0xba0 [ 1328.845136][ T9800] hci_event_packet+0x807/0x1280 [ 1328.850595][ T9800] hci_rx_work+0x43a/0xd60 [ 1328.855577][ T9800] process_scheduled_works+0xa60/0x1600 [ 1328.861641][ T9800] worker_thread+0xa5e/0xfe0 [ 1328.866744][ T9800] kthread+0x2fa/0x390 [ 1328.871320][ T9800] ret_from_fork+0x48/0x80 [ 1328.876257][ T9800] ret_from_fork_asm+0x11/0x20 [ 1328.881593][ T9800] [ 1328.881593][ T9800] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 1328.889319][ T9800] __mutex_lock+0x135/0xc80 [ 1328.894347][ T9800] hci_remote_features_evt+0x535/0x900 [ 1328.900333][ T9800] hci_event_packet+0x807/0x1280 [ 1328.905795][ T9800] hci_rx_work+0x43a/0xd60 [ 1328.910733][ T9800] process_scheduled_works+0xa60/0x1600 [ 1328.916804][ T9800] worker_thread+0xa5e/0xfe0 [ 1328.921927][ T9800] kthread+0x2fa/0x390 [ 1328.926525][ T9800] ret_from_fork+0x48/0x80 [ 1328.931472][ T9800] ret_from_fork_asm+0x11/0x20 [ 1328.936761][ T9800] [ 1328.936761][ T9800] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 1328.944142][ T9800] __lock_acquire+0x37ef/0x7d80 [ 1328.949523][ T9800] lock_acquire+0x19e/0x420 [ 1328.954557][ T9800] __mutex_lock+0x135/0xc80 [ 1328.959594][ T9800] l2cap_chan_connect+0xfc/0xe30 [ 1328.965238][ T9800] l2cap_sock_connect+0x586/0x760 [ 1328.970786][ T9800] kernel_connect+0x142/0x1c0 [ 1328.976075][ T9800] rfcomm_dlc_open+0xa1f/0xec0 [ 1328.981362][ T9800] rfcomm_sock_connect+0x2ed/0x600 [ 1328.987045][ T9800] __sys_connect+0x3da/0x470 [ 1328.992151][ T9800] __x64_sys_connect+0x7a/0x90 [ 1328.997428][ T9800] do_syscall_64+0x55/0xb0 [ 1329.002387][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1329.008822][ T9800] [ 1329.008822][ T9800] other info that might help us debug this: [ 1329.008822][ T9800] [ 1329.019049][ T9800] Chain exists of: [ 1329.019049][ T9800] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 1329.019049][ T9800] [ 1329.031566][ T9800] Possible unsafe locking scenario: [ 1329.031566][ T9800] [ 1329.039007][ T9800] CPU0 CPU1 [ 1329.044373][ T9800] ---- ---- [ 1329.049725][ T9800] lock(rfcomm_mutex); [ 1329.053878][ T9800] lock(hci_cb_list_lock); [ 1329.060893][ T9800] lock(rfcomm_mutex); [ 1329.067563][ T9800] lock(&hdev->lock); [ 1329.071628][ T9800] [ 1329.071628][ T9800] *** DEADLOCK *** [ 1329.071628][ T9800] [ 1329.079757][ T9800] 1 lock held by syz.5.16205/9800: [ 1329.084855][ T9800] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 1329.094166][ T9800] [ 1329.094166][ T9800] stack backtrace: [ 1329.100044][ T9800] CPU: 1 PID: 9800 Comm: syz.5.16205 Not tainted syzkaller #0 [ 1329.107491][ T9800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1329.117538][ T9800] Call Trace: [ 1329.120810][ T9800] [ 1329.123734][ T9800] dump_stack_lvl+0x18c/0x250 [ 1329.128414][ T9800] ? load_image+0x420/0x420 [ 1329.132913][ T9800] ? show_regs_print_info+0x20/0x20 [ 1329.138110][ T9800] ? print_circular_bug+0x12b/0x1a0 [ 1329.143307][ T9800] check_noncircular+0x2fc/0x400 [ 1329.148242][ T9800] ? print_deadlock_bug+0x5d0/0x5d0 [ 1329.153437][ T9800] ? lockdep_lock+0xf5/0x230 [ 1329.158030][ T9800] ? _find_first_zero_bit+0xd6/0x100 [ 1329.163307][ T9800] __lock_acquire+0x37ef/0x7d80 [ 1329.168156][ T9800] ? is_bpf_text_address+0x28f/0x2a0 [ 1329.173440][ T9800] ? verify_lock_unused+0x140/0x140 [ 1329.178633][ T9800] ? __lock_acquire+0x1336/0x7d80 [ 1329.183652][ T9800] ? verify_lock_unused+0x140/0x140 [ 1329.188862][ T9800] lock_acquire+0x19e/0x420 [ 1329.193366][ T9800] ? l2cap_chan_connect+0xfc/0xe30 [ 1329.198475][ T9800] ? __might_sleep+0xe0/0xe0 [ 1329.203062][ T9800] ? read_lock_is_recursive+0x20/0x20 [ 1329.208429][ T9800] ? hci_get_route+0x3a5/0x4d0 [ 1329.213192][ T9800] ? __lock_acquire+0x7d80/0x7d80 [ 1329.218214][ T9800] __mutex_lock+0x135/0xc80 [ 1329.222711][ T9800] ? l2cap_chan_connect+0xfc/0xe30 [ 1329.227820][ T9800] ? do_raw_read_unlock+0x3d/0x80 [ 1329.232841][ T9800] ? _raw_read_unlock+0x28/0x40 [ 1329.237692][ T9800] ? hci_get_route+0x3a5/0x4d0 [ 1329.242461][ T9800] ? l2cap_chan_connect+0xfc/0xe30 [ 1329.247652][ T9800] ? mutex_lock_nested+0x20/0x20 [ 1329.252581][ T9800] ? print_unlock_imbalance_bug+0x160/0x160 [ 1329.258469][ T9800] ? mark_lock+0x94/0x320 [ 1329.262795][ T9800] l2cap_chan_connect+0xfc/0xe30 [ 1329.267725][ T9800] ? lock_chain_count+0x20/0x20 [ 1329.272573][ T9800] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 1329.278459][ T9800] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1329.283824][ T9800] ? _local_bh_enable+0xa0/0xa0 [ 1329.288671][ T9800] ? bacmp+0xe/0x30 [ 1329.292475][ T9800] l2cap_sock_connect+0x586/0x760 [ 1329.297496][ T9800] ? l2cap_sock_bind+0x940/0x940 [ 1329.302429][ T9800] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1329.308404][ T9800] ? __lock_acquire+0x7d80/0x7d80 [ 1329.313423][ T9800] ? kernel_connect+0xf2/0x1c0 [ 1329.318184][ T9800] kernel_connect+0x142/0x1c0 [ 1329.322862][ T9800] ? kernel_accept+0x350/0x350 [ 1329.327625][ T9800] ? rfcomm_dlc_open+0x9e3/0xec0 [ 1329.332556][ T9800] rfcomm_dlc_open+0xa1f/0xec0 [ 1329.337314][ T9800] ? rfcomm_sock_connect+0x2c6/0x600 [ 1329.342595][ T9800] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1329.347958][ T9800] ? rfcomm_dlc_free+0x50/0x50 [ 1329.352714][ T9800] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1329.358077][ T9800] ? _local_bh_enable+0xa0/0xa0 [ 1329.362918][ T9800] ? do_raw_spin_unlock+0x121/0x230 [ 1329.368115][ T9800] rfcomm_sock_connect+0x2ed/0x600 [ 1329.373227][ T9800] __sys_connect+0x3da/0x470 [ 1329.377817][ T9800] ? __sys_connect_file+0x170/0x170 [ 1329.383017][ T9800] __x64_sys_connect+0x7a/0x90 [ 1329.387776][ T9800] do_syscall_64+0x55/0xb0 [ 1329.392193][ T9800] ? clear_bhb_loop+0x40/0x90 [ 1329.396865][ T9800] ? clear_bhb_loop+0x40/0x90 [ 1329.401538][ T9800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1329.407426][ T9800] RIP: 0033:0x7fb91199e159 [ 1329.411835][ T9800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.431439][ T9800] RSP: 002b:00007fb912834028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1329.439849][ T9800] RAX: ffffffffffffffda RBX: 00007fb911c25fa0 RCX: 00007fb91199e159 [ 1329.447812][ T9800] RDX: 000000000000000a RSI: 0000200000000000 RDI: 0000000000000004 [ 1329.455775][ T9800] RBP: 00007fb911a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1329.463738][ T9800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.471703][ T9800] R13: 00007fb911c26038 R14: 00007fb911c25fa0 R15: 00007ffff9f876e8 [ 1329.479763][ T9800] [ 1329.561073][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 1329.637611][ T9740] blk_print_req_error: 146 callbacks suppressed [ 1329.637628][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1329.681517][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.702968][ T9740] buffer_io_error: 120 callbacks suppressed [ 1329.702981][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1329.725118][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.734808][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1329.746825][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.764952][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1329.773912][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.783114][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1329.792684][ T9740] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.802057][ T9740] Buffer I/O error on dev loop2p4, logical block 0, async page read [ 1331.664421][ T5780] Bluetooth: hci2: command 0x0406 tx timeout